Scenario Analysis of Decision and Risk Points for Organisations and Directors Arising from New Ransomware Payments Disclosure Legislation in Australia

The ongoing threat of ransomware has led to a mandatory ransomware payment disclosure regime being enacted in Australia. Considering the theorised intersection between ransomware payments, sanction payments and terrorist payments, as well as the overlap with other legislative obligations, it has become increasingly difficult for organisations and directors to manage their obligations when faced with a ransomware attack. Using process mapping, swimlane diagrams and scenario-based case analysis, I analyse the current landscape identifying steps and processes for organisations and directors to follow. My research provides theoretical and practical insights for organisations and directors to help navigate this complex regulatory landscape.